Auditing Events

Get-LiquitAuditingEvent

This command displays a list of all auditing events known within the Application Workspace or you can just select one in particular.

Syntax

Get-LiquitAuditingEvent 
[-Entity] 
[-Type] {UserLogin | DistributePackage | LaunchPackage | InstallPackage | UninstallPackage | UserLogoff | RepairPackage | InstallDeployment | RestCreate | RestUpdate | RestDelete} ]
[-LiquitContext <LiquitContext>]

Get-LiquitAuditingEvent 
[-Entity] <Entity> 
[-Type] {UserLogin | DistributePackage | LaunchPackage | InstallPackage | UninstallPackage | UserLogoff | RepairPackage | InstallDeployment | RestCreate | RestUpdate | RestDelete} ]
[-LiquitContext <LiquitContext>]
[<CommonParameters>]

Get-LiquitAuditingEvent 
[-IdentityRef] <IdentityRef[]>
[-Type] {UserLogin | DistributePackage | LaunchPackage | InstallPackage | UninstallPackage | UserLogoff | RepairPackage | InstallDeployment | RestCreate | RestUpdate | RestDelete} ]
[-LiquitContext <LiquitContext>]  
[<CommonParameters>]

Get-LiquitAuditingEvent 
[-SourceRef] <EntityRef[]>
[-Type] {UserLogin | DistributePackage | LaunchPackage | InstallPackage | UninstallPackage | UserLogoff | RepairPackage | InstallDeployment | RestCreate | RestUpdate | RestDelete}]
[-LiquitContext <LiquitContext>]  
[<CommonParameters>]

Parameters

NameValueDescriptionRequiredDefault value
Entity<Entity[]>The entity for which the auditing event took place.Yes
IdentityRef<IdentityRef[]>The reference of identity who made the change (e.g. user)  and for which you want to retrieve auditing events.Yes
SourceRef<EntityRef[]>The reference of the source form where the change was made (e.g. server, device) and for which you want to retrieve  events.Yes
Type{UserLogin | DistributePackage | LaunchPackage | InstallPackage | UninstallPackage | UserLogoff | RepairPackage | InstallDeployment | RestCreate | RestUpdate | RestDelete}The type of the auditing event.

LiquitContext<LiquitContext>Determines the selected zone.NoDefault

See also

System Auditing